On Tue, Dec 1, 2020 at 12:05 PM Graham Leggett <minf...@sharp.fm.invalid> wrote:
> Hi all, > > I object to the deprecation of the tomcat-native/APR connector. > > Most specifically, I am -1 on the following: > > https://marc.info/?l=tomcat-dev&m=160681846808019&w=2 > > Looking at past discussion on this, the justification has been: > > "It is inherently less stable. If we get the NIO code wrong, you might > see a NullPointerException. If we get the APR code wrong you might see a > JVM crash.” > > Both a NullPointerException and a crash result in the same outcome - a non > working server. Tomcat-native has releases in the > https://archive.apache.org/dist/tomcat/tomcat-connectors/native/ going > back 15 years to 2005, a claim of a lack of stability needs to be > quantifiable. > > I also object to the removal of OpenSSL code, for the same reason. > > We are in the middle of a global pandemic. Our users do not have the > resources to suddenly divert to reengineering what is to them a perfectly > working system, to replace what exists with something else that just works > differently. > You still have years to plan a migration off the APR connector as it will only be removed in 10.1 and Tomcat 9.0 continues to be supported. This eventual removal or APR has been discussed for years. BTW, so that you know, there are also discussions about AJP. However, the OpenSSL support as used by NIO/NIO2 is not under consideration for removal. Its wrapper could however be replaced by using some Java code rather than C code (Panama). Yes, there's an overall plan to remove our native code ... Rémy > Regards, > Graham > — > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > >
